MALWARE FAMILY
Morpheus Loader
Internal ID: win.morpheus_loader
Last seen:Mar 17, 2026
Intelligence Profile
Malware family identifying win.morpheus_loader. Origin and technical characteristics tracked via Malpedia.
Threat Analysis
Morpheus Loader is a malware family tracked by threat intelligence researchers and catalogued in the Malpedia dataset. It represents a distinct malicious software lineage with identifiable code characteristics, behaviors, and victimology.
Ransomware Victims (7)
CTIWATCH tracks 7 organizations claimed as victims by Morpheus Loader on its data leak site, with attack dates, sectors and countries.
View full victims list →Known Campaigns
Morpheus Loader — Active Campaign March 2026
Morpheus Loader is conducting an active ransomware campaign targeting organizations across 1 country. 3 confirmed victims recorded in the last 45 days. Campaign status: ACTIVE (last activity 30 Mar 2026).
ACTIVELOW2026
External References
Quick Facts
TypeMalware Family
Aliases1
Also Known As
win.morpheus_loader
External Intelligence
Malpedia: win.morpheus_loaderResearch Links
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.